.nav-burger { display: none !important; } @media (max-width: 1180px) { /* Match Tailwind's base layer: its important [hidden] reset otherwise wins. */ @layer base { .nav-overlay[hidden] { display: flex !important; } } .nav-overlay[hidden] { position: static; padding: 2rem 1rem; } }

phoenix 1.8.6 vulnerabilities

5 advisories known · phoenix@1.8.6 · 2 affect this release · Dependencies not checked

SEVERITYADVISORYPUBLISHED

Affects 1.8.6

SEVERITYADVISORYPUBLISHED

HighPhoenix: Unbounded channel joins per transport enables DoS over few connectionsGHSA-6983-jfq8-485wCVE-2026-56811EEF-CVE-2026-56811Affected >=0.11.0 <1.5.15, >=1.6.0-rc.0 <1.6.17, >=1.7.0-rc.0 <1.7.24, >=1.8.0-rc.0 <1.8.9Fixed in 1.5.15 Fixed in 1.6.17 Fixed in 1.7.24 Fixed in 1.8.9OSV source ↗2 months ago

MediumPhoenix: Presence keys colliding with `Object.prototype` members break existence checksGHSA-63mc-hw7g-86rrCVE-2026-56812EEF-CVE-2026-56812Affected >=1.2.0-rc.0 <1.5.15, >=1.6.0-rc.0 <1.6.17, >=1.7.0-rc.0 <1.7.24, >=1.8.0-rc.0 <1.8.9Fixed in 1.5.15 Fixed in 1.6.17 Fixed in 1.7.24 Fixed in 1.8.9OSV source ↗2 months ago

Does not affect 1.8.6

SEVERITYADVISORYPUBLISHED

HighPhoenix: Long-poll NDJSON body splitting causes large memory allocationGHSA-628h-q48j-jr6qCVE-2026-32689EEF-CVE-2026-32689Affected >=1.7.0 <1.7.22, >=1.8.0 <1.8.6Fixed in 1.7.22 Fixed in 1.8.6OSV source ↗6 months ago

HighPhoenix before 1.6.14 mishandles check_origin wildcardingGHSA-p8f7-22gq-m7j9CVE-2022-42975Affected <1.6.14Fixed in 1.6.14OSV source ↗4 years ago

MediumPhoenix Arbitrary URL RedirectGHSA-cmfh-8f8r-fj96CVE-2017-1000163Affected <1.0.6, >=1.1.0 <1.1.8, >=1.2.0 <1.2.3Fixed in 1.0.6 Fixed in 1.1.8 Fixed in 1.2.3OSV source ↗5 years ago